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DETAILED ACTION 

This action is responsive to amendment/affidavit under Rule 131 filed on 
February 25'^ 2008. 

Claims 1-14 are presented for examination. 

Priority 

Receipt Is acknowledged of papers submitted under 35 U.S.C. 119(a)-(d), which 
papers have been placed of record in the file. 

Information Disclosure Statement 
The information disclosure statement (IDS) submitted on 1/23/08 is in 
compliance with the provisions of 37 CFR 1.97. Accordingly, the information disclosure 
statement is being considered by the examiner. 

Drawings 

Figure 1 should be designated by a legend such as --Prior Art- because only 
that which Is old is illustrated. See MPEP § 608.02(g). Corrected drawings In 
compliance with 37 CFR 1.121(d) are required in reply to the Office action to avoid 
abandonment of the application. The replacement sheet(s) should be labeled 
"Replacement Sheet" In the page header (as per 37 CFR 1 .84(c)) so as not to obstruct 
any portion of the drawing figures. If the changes are not accepted by the examiner, the 
applicant will be notified and informed of any required corrective action In the next Office 
action. The objection to the drawings will not be held in abeyance. 
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Response to Amendment 

The "Declaration" filed on 2/25/08 under 37 CFR 1.131 is sufficient to overcome 
the Balabine et al. reference. 

Response to Arguments 

Applicant's arguments with respect to claims 1-14 have been considered but are 
moot in view of the new ground(s) of rejection. 

Examiner's Interpretation 

Before a detailed rejection, a brief interpretation of peer-to-peer networks should 
be discussed. A peer-to-peer network is a communications network in which each party 
has the same capabilities and either party can initiate a communication session. Peer- 
to-peer communication may be implemented in a client/server environment by giving 
each communication node, server and client, the same capabilities, meaning a client 
can be configured as a server and a server can be configured as a client, where traffic 
Is running In both directions. Also, at any one given time you have a client process and 
a server process, makes it irrelevant to the type of network being used. 

Claim Rejections - 35 USC §112 

The following Is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification sliall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claims 1 and 14 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 
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Claim 1 recites the limitation "...to the other" in Pg. 20, Ln 12. There is 
insufficient antecedent basis for this limitation in the claim. 

Claim 1 recites the limitation "...that this connection..." in Pg. 20, Ln 15. There is 
insufficient antecedent basis for this limitation in the claim. 

Claim 14 recites the limitation "...they decrease..." in Pg. 23, Ln 15. There is 
insufficient antecedent basis for this limitation in the claim. 

Claim 6 is generally narrative and indefinite, failing to conform with current U.S. 
practice. It appears to be a literal translation into English from a foreign document and is 
replete with grammatical and idiomatic errors. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

This application currently names joint inventors. In considering patentability of the 

claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of the 
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various claims was commonly owned at the time any inventions covered therein were 
made absent any evidence to the contrary. Applicant is advised of the obligation under 
37 CFR 1 .56 to point out the inventor and invention dates of each claim that was not 
commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

Claims 1-14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Napster Client/Server protocol hereinafter Napster in view of Swift et al. hereinafter 
Swift (U.S 6,377,691). 

Regarding Claim 1 . 

Napster taught a method of peer-to-peer connecting devices when implementing 
dynamic networking, including a connection creating method and a connection 
disconnecting method of peer-to-peer devices, which is characterized in that: 

a connection configuration is performed to all devices requiring a peer-to-peer 
connection, which includes configuring account information containing a user name and 
a password for allowing connections and a maximum parallel connection number 
allowed by a device (Pg. 2, Msg. 2, Client login message denotes nickname and 
password; Pg. 15, Msg. 619 and 620, Client/Server may limit the number of downloads 
from a particular client); 

said connection creating method of peer-to-peer devices includes the steps of: 

sending a device connecting request from a connection initiating device in 

the home network to a connection target device in the network (Pg. 4, Msg. 200, 
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Client searches for file of interest; Pg. 5, Msg. 203, Client requests to download 
file from user with the file of interest); 

said connection disconnecting method of peer-to-peer devices includes the steps 

of: 

sending a connection disconnecting message from the connection 
initiating device or the connection target device to the other (Pg. 9, Msg. 316, 
Server sends a message when client is about to be disconnected); 

regarding, by the connection target device or the connection initiating 
device which receives the connection disconnecting message, that this 
connection has been disconnected (Pg. 18, Msg. 751, Client pings <user> 
connection to determine if connection is alive. Implicitly determines whether the 
user is disconnected or banned). 

Napster did not explicitly teach generating a connection challenge value 
randomly by the connection target device and sending it to the connection initiating 
device. However, Swift taught a server (target device) creates a challenge containing an 
identifier generated by the server C-R component and sends it to the client (initiating 
device) (Col. 4, Ln 1-6). 

Napster also did not explicitly teach generating a connection reply value 
according to the received connection challenge value by the connection initiating device 
and sending it to the connection target device. However, Swift taught the client 
responds to the challenge by sending a response and session key (Col. 4, Ln 6-8). 

Napster also did not explicitly teach sending a connection response message 
from the connection target device to the connection initiating device according to the 
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connection reply value. However, Swift taught server receives the challenge response 
for authentication between the server and client (Col. 4, Ln 11-15). 

Napster also did not explicitly teach judging a result of connection according to 
the connection response message by the connection initiating device, if the connection 
response message Includes information on a successful connecting result, establishing 
a peer-to-peer connection between the connection initiating device and the connection 
target device. However, Swift taught server verifies the authentication based on the 
challenge responses and authorizes or rejects connections with the server (Col. 4, Ln 
11-24). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made, to combine. Swift's secure communication system into 
Napster's system, to allow challenge authentication between the connection initiating 
device and the connection target device to be exchanged, generating acknowledgments 
by the connection initiating device according to the challenge key generated by the 
connection target device, judging the acknowledgments, and establishing connection 
between the peer devices based on the acknowledgments, as this would provide 
protection to peer devices from unsanctioned connections, mitigate hack attacks on the 
local network or in close proximity to the devices and concealment from unauthorized 
parties. 

Regarding Claim 2 . 

Napster taught said connection setting to devices is a direct setting through a 
human-machine interface on devices or a remote setting through other devices having 
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human-machine interfaces (Pg.19, Msg. 810, request a change in server configuration 
variables). 

Regarding Claim 3 . 

Napster taught said connection initiating device is a service providing device or a 
service utilizing device, and said connection target device is a service utilizing device or 
a service providing device (It is well-known in the art, Napster is a file-sharing peer-to- 
peer platform providing music file sharing service to users). 

Regarding Claim 4 . 

Napster taught with respect to the device connecting request in said step a, the 
message fields include type of message, serial number of message, user name and 
serial number of connection request (Pg. 2, Msg. 2, message consists of nickname, 
password, port, client-info, link-type, and num fields). 

Regarding Claim 5 , 

Napster taught wherein in said step b, said connection allowed further includes 
the steps of: 

judging whether the number of connection initiating devices currently connected 

with the connection target device has reached the upper limit of the allowed connection 
number (Pg. 15, Msg. 619, uploading client sends message to notify downloader limit 
was reached); and 

judging whether the user information of the connection initiating device is in the 
connection target device (Pg. 6, Msg. 207 and 208, Napster by default allows all 
connections to be made with users possessing the file in interest. Napster also allows 
users to add other users to their hotlist which combined with Message 209 or Message 
210 allows notifications of hotlist user connection or disconnection). 
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Regarding Claim 6 . 

Napster taught when in the step b, the number of devices connected with the 
connection target device has already reached the upper limit of the allowed number of 
connected devices, then in the step e, the connection target device sends a connection 
response message whose connecting result is overload to the connection initiating 
device (Pg. 15, Msg. 619, uploading client sends message to notify downloader limit 
was reached and no further simultaneous downloads are allowed); 

when in step b, there is no user information of the connection initiating device is 
present in the connection target device, then in the step e, the connection target device 
sends a connection response message whose connecting result is denial to access to 
the connection initiating device (Pg. 9, Msg. 320 and 321, Although Napster by default 
allows all connections to be made with users possessing the file in interest, Napster 
also allow users to ignore others by adding them into the ignore list. Any connections 
requesting from users in the ignore list will trigger a denial access message). 

Regarding Claim 7 . 

Swift further taught the connection challenge value sent in said step b includes 
type of message, serial number of message, serial number of connection response 
message, connecting result, authenticating algorithm identifier and challenge value (Col. 
8, Ln 13-22). 

Regarding Claim 8 , 

Swift further taught the message of challenge reply value sent in said step c 
includes type of message, serial number of message, serial number of connection 
request and the reply value constituted by a reply character string (Col. 7, Ln 63~Col. 8, 
Ln 1-12). 
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Regarding Claim 9 . 

Napster taught with respect to the connection response message in said step d, 

the message fields include type of message, serial number of message, serial number 
of connection response message and connecting result (Pg. 5. Msg. 203 and 204 ). 
Regarding Claim 10 . 

Napster taught the connection target device and the connection initiating device 
increase the number of currently connected devices by one ( Pg. 8. Msg. 218 ). 
Regarding Claim 1 1 . 

Napster taught substantially all the limitations of claim 1, however, did not 
specifically teach in step b, said connection target device also saves the connection 
challenge value; in said step c, said connection initiating device retrieves key 
information corresponding to the connection challenge value and generates said 
connection reply value together with the connection challenge value; in said step d, the 
connection target device judges validity of the connection reply value according to the 
saved connection challenge value and the key corresponding to this connection 
challenge value, and when it is valid, sends a connection response message about 
success of connection to the connection initiating device, and when it is invalid, sends a 
connection response message about denial of access to the connection initiating 
device. 

Swift taught the server verifies the user's identity by sending the challenge 
response from the client to the Domain Controller (database of user identifier). The 
domain controller determines the user identification and encrypts the response back to 
the client and thus allowing the session connection, if the user isn't valid, a denial 
access is given (Col. 8, Ln 38-52). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made, to combine. Swift's secure communication system into 
Napster's system, to allow a connection target device save the connection challenge 
value and further performing steps c and d. See motivation of Claim 1 . 

Regarding Claim 12 . 

Napster taught substantially all the limitations of claim 1, however, did not 
specifically teach after said step c), a transmission key is generated between the 
connection initiating device and the connection target device which have established a 
peer-to-peer connection there between in accordance with an encryption method 
defined in a security mechanism, and is used to transmit subsequent data. 

Swift taught the client responds to a challenge by sending a response and the 
session key to the server. The response is encrypted along with the client's identifier so 
as to permit a secure communication with the server (Col. 4, Ln 6-8). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made, to combine. Swift's secure communication system into 
Napster's system, to allow a generated transmission key between the client and server 
be encrypted. See motivation of Claim 1. 

Regarding Claim 13 . 

Napster taught with respect to the connection disconnecting request message in 
said step f, the message fields include type of message, serial number of message and 
reason for disconnecting connection (Pg. 9, Msg. 316). 

Regarding Claim 14 . 

Napster taught the connection target device and the connection initiating device 
decrease the number of currently connected devices by one (Pg. 8, Msg. 219). 
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Conclusion 

Examiner's Note: Examiner lias cited particular columns and line numbers in 
the references applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings of the art and are 
applied to specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant in preparing 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the Examiner. 

In the case of amending the claimed invention. Applicant is respectfully 
requested to indicate the portion(s) of the specification which dictate(s) the structure 
relied on for proper interpretation and also to verify and ascertain the metes and bounds 
of the claimed invention. 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: US 2003/0217136, US 2001/00027498, US Patent 7,222,187, 
US Patent 7,069,438, US Patent 7,225,258. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Hee Soo Kim whose telephone number is (571) 270- 
3229. The examiner can normally be reached on Monday - Friday 8:00AM - 5:30PM 
EST. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571 ) 272-5001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for published 

applications may be obtained from either Private PAIR or Public PAIR. Status 

information for unpublished applications is available through Private PAIR only. For 

more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 

have questions on access to the Private PAIR system, contact the Electronic Business 

Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 

Customer Service Representative or access to the automated information system, call 

800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/H. K./ 
4/22/08 

/Ario Etienne/ 

Supervisory Patent Examiner, Art Unit 2157 



